[CLSA-2026:1785319688] curl: Fix of CVE-2026-8286
Type:
security
Severity:
Important
Release date:
2026-07-29 10:08:19 UTC
Description:
- CVE-2026-8286: require a matching SSL configuration before reusing a pooled connection for a clear-text transfer that upgrades via STARTTLS
CVEs fixed:
Updated packages:
  • curl-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:a4dbbd12554fc7bd7f1edd0ed6ae4474fe6390305cd2a55534413016a5efa945
  • curl-minimal-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:2db302cdadd1f4d25ed9a183aba7d7d9650a4612f7d54dfc2d90d879c6b41e3b
  • libcurl-7.61.1-22.el8.tuxcare.els21.i686.rpm
    sha:09626eeebb57c9b973d58d1397f9a41b69d46147530261f1e1f1324184379df6
  • libcurl-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:ef2715091dd1ec6705f19a766bc9f890cd4de3d6c81011160da274b63be755a0
  • libcurl-devel-7.61.1-22.el8.tuxcare.els21.i686.rpm
    sha:5512d20cb896803a8099817f84362230fc7348c9e122dcc3554350251998d23a
  • libcurl-devel-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:8222ce65a8e9a5fa595ad56aec9ef9ab4cdcfcb398d171bdef5381c6931cd831
  • libcurl-minimal-7.61.1-22.el8.tuxcare.els21.i686.rpm
    sha:c0ef364f7eac9c42b0d3c0d60bd0b9498d25f4a5010914b11f680bf940319ad3
  • libcurl-minimal-7.61.1-22.el8.tuxcare.els21.x86_64.rpm
    sha:534dd104e5b290d7c3090f139786de6661716a0c488dacabc4ff900f5aec6fde
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.